发布 0.1.0:通知渠道、告警规则、令牌版本与安全加固

internal/api/logevent.go

@@ -7,6 +7,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
+	"oci-portal/internal/model"
 	"oci-portal/internal/service"
 )
 
@@ -106,6 +107,127 @@ func (h *logEventHandler) list(c *gin.Context) {
 	c.JSON(http.StatusOK, gin.H{"items": items, "total": total})
 }
 
+// alertRuleRequest 是创建/更新告警规则的请求体。
+type alertRuleRequest struct {
+	Name          string `json:"name"`
+	Enabled       bool   `json:"enabled"`
+	OciConfigID   uint   `json:"ociConfigId"`
+	EventTypes    string `json:"eventTypes"`
+	SourceIPs     string `json:"sourceIps"`
+	SourceIPMode  string `json:"sourceIpMode"`
+	ResourceMatch string `json:"resourceMatch"`
+	Threshold     int    `json:"threshold"`
+	WindowMinutes int    `json:"windowMinutes"`
+}
+
+// toModel 转为规则模型(默认阈值 1)。
+func (r alertRuleRequest) toModel() model.AlertRule {
+	if r.Threshold == 0 {
+		r.Threshold = 1
+	}
+	return model.AlertRule{
+		Name: r.Name, Enabled: r.Enabled, OciConfigID: r.OciConfigID,
+		EventTypes: r.EventTypes, SourceIPs: r.SourceIPs, SourceIPMode: r.SourceIPMode,
+		ResourceMatch: r.ResourceMatch, Threshold: r.Threshold, WindowMinutes: r.WindowMinutes,
+	}
+}
+
+// listAlertRules 返回全部告警规则。
+//
+// @Summary  告警规则列表
+// @Tags     任务与日志回传
+// @Success  200 {object} map[string]any
+// @Security BearerAuth
+// @Router   /api/v1/log-events/alert-rules [get]
+func (h *logEventHandler) listAlertRules(c *gin.Context) {
+	rules, err := h.svc.ListAlertRules(c.Request.Context())
+	if err != nil {
+		respondError(c, err)
+		return
+	}
+	c.JSON(http.StatusOK, gin.H{"items": rules})
+}
+
+// createAlertRule 创建告警规则;字段非法返回 400。
+//
+// @Summary  创建告警规则
+// @Tags     任务与日志回传
+// @Param    body body alertRuleRequest true "请求体"
+// @Success  201 {object} map[string]any
+// @Security BearerAuth
+// @Router   /api/v1/log-events/alert-rules [post]
+func (h *logEventHandler) createAlertRule(c *gin.Context) {
+	var req alertRuleRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+	rule, err := h.svc.CreateAlertRule(c.Request.Context(), req.toModel())
+	if err != nil {
+		respondAlertRuleError(c, err)
+		return
+	}
+	c.JSON(http.StatusCreated, rule)
+}
+
+// updateAlertRule 整体覆盖告警规则(含启停)。
+//
+// @Summary  更新告警规则
+// @Tags     任务与日志回传
+// @Param    ruleId path int true "规则 ID"
+// @Param    body body alertRuleRequest true "请求体"
+// @Success  200 {object} map[string]any
+// @Security BearerAuth
+// @Router   /api/v1/log-events/alert-rules/{ruleId} [put]
+func (h *logEventHandler) updateAlertRule(c *gin.Context) {
+	id, err := strconv.ParseUint(c.Param("ruleId"), 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "规则 ID 非法"})
+		return
+	}
+	var req alertRuleRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+	rule, err := h.svc.UpdateAlertRule(c.Request.Context(), uint(id), req.toModel())
+	if err != nil {
+		respondAlertRuleError(c, err)
+		return
+	}
+	c.JSON(http.StatusOK, rule)
+}
+
+// deleteAlertRule 删除告警规则及其命中记录。
+//
+// @Summary  删除告警规则
+// @Tags     任务与日志回传
+// @Param    ruleId path int true "规则 ID"
+// @Success  204 "无内容"
+// @Security BearerAuth
+// @Router   /api/v1/log-events/alert-rules/{ruleId} [delete]
+func (h *logEventHandler) deleteAlertRule(c *gin.Context) {
+	id, err := strconv.ParseUint(c.Param("ruleId"), 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "规则 ID 非法"})
+		return
+	}
+	if err := h.svc.DeleteAlertRule(c.Request.Context(), uint(id)); err != nil {
+		respondError(c, err)
+		return
+	}
+	c.Status(http.StatusNoContent)
+}
+
+// respondAlertRuleError 把字段校验错误映射为 400。
+func respondAlertRuleError(c *gin.Context, err error) {
+	if errors.Is(err, service.ErrInvalidAlertRule) {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+	respondError(c, err)
+}
+
 // getRelay 查询 OCI 侧链路状态与关键事件清单。
 //
 // @Summary  查询 OCI 侧链路状态与关键事件清单